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1 DETAILED ACTION 

2 

3 This action is in response to the communication filed on 1 0/12/2006. 

4 All objections and rejections not set forth below have been withdrawn. 

5 Claims 51 - 65 are pending. 
6 

7 Claim Rejections - 35 USC § 103 
8 

9 The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 

1 0 obviousness rejections set forth in this Office action: 

11 (a) A patent may not be obtained though the invention is not identically disclosed or described as set 

1 2 forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 

13 the prior art are such that the subject matter as a whole would have been obvious at the time the 

1 4 invention was made to a person having ordinary skill in the art to v\^ich said subject matter pertains. 

1 5 Patentability shall not be negatived by the manner in which the invention was made. 
16 

17 

1 8 Claims 51, 52, 54 - 57, 59 - 62, 64, and 65 are rejected under 35 



1 9 U.S.C. 102(e) as being anticipated by Flyntz, "Multi-Level Secure Computer With 

20 Token-Based Access Control", U.S. Patent 6,389,542 in view of Angelo, "Method 

21 and Apparatus for Allowing Access to Secured computer Resources by Utilizing a 

22 Password and an External Encryption Algorithm", U.S. Patent 5,949,882. 

23 

24 Regarding claim 51 , Flyntz discloses: 

25 receiving a request for an autlientication, at a microcontroller, requesting 

26 security data from a security device; receiving the security data from the security device, 

27 at the microcontroller {F\yn\z, col. 2, lines 52-56; col. 15, lines 5-20, 33-36, 53-55). 
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1 Flyntz discloses that a user requests authentication by supplying security data to the 

2 microcontroller, which in turn processes such security data to evaluate acceptance. 

3 evaluating the security data; and approving tine authentication if the security data 

4 is evaluated as acceptable (Flyntz, col. 10, lines 33-40). 

5 Flyntz discloses a microcontroller, serving to control the connection of the CPU to 

6 devices located on system buses (Flyntz, fig. 2; col. 5, line 61 - col. 6, line 25; col. 15, 

7 lines 21 -32). The system of Flyntz allows for the provision of power to secure system 

8 portions after a positive indication of acceptability has been received (Flyntz, Abstract; 

9 col. 1 , lines 55-63). The microcontroller receives a request for authentication via 

10 connection to a security device (Flyntz, fig. 2:31). Flyntz, however, does not disclose 

1 1 the microcontroller as included in a bridge. 

12 Like Flyntz, Angelo discloses controlling circuitry to implement a secure power up 

13 procedure for providing power to system portions on system buses, upon permission for 

14 authorized users (Angelo, Abstract; col. 6, lines 44-50; col. 11, lines 17-45). Angelo 

15 specifically discloses that the controlling circuitry used to accomplish this procedure is 

16 included in the bridge, thus allowing the system to control the connection of the CPU to 

17 devices located on system buses (Angelo, fig. 1-130; col. 5, lines 1-30). The inclusion 

18 of the above mentioned security features within the bridge allows for increased 

19 hardware security, as security data may be entered via a secure communication path to 

20 the bridge after a request for authentication has been received (Angelo, 2:39-43; 1 1 :64- 

21 12:9). 
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1 It .would have been obvious to one of ordinary skill in the art to employ the secure 

2 bridge implementation of Angelo for connecting devices on system buses along with the 

3 security microcontroller of Flyntz for connecting devices on system buses. This would 

4 have been obvious because one of ordinary skill in the art would have been motivated 

5 by the showing of prior art that the above mentioned security features need not be 

6 constructed as separate system components, but rather, may be feasibly included 

7 within the existing computer system's bridge, thereby allowing the secure connection of 

8 the CPU to devices located on buses (Angelo, fig. 2-130; col. 2, lines 39-43; 5:13-26; 

9 10:33-54), as well as increased hardware security. 



1 0 The combination of Flyntz and Angelo discloses the request being received from 

1 1 a bus external to the bridge (Flyntz, fig. 2, elem. 31 ). 
12 

13 Regarding claim 52, the combination of Flyntz and Angelo discloses: 

1 4 disapproving the authentication if the security data is evaluated as unacceptable 

15 (Flyntz, col. 2, lines 53-57; col. 10, lines 33-37). 
16 

17 Regarding claim 53, the combination of Flyntz and Angelo discloses wherein 

1 8 evaluating the security data conhprises requesting an indication of acceptability inside 

1 9 S/W/W (Angelo, Abstract; col. 6, lines 44-50; coL 5: 21 -30; col. 1 1 , lines 17-45). 
20 

21 Regarding claim 54, the combination of Flyntz and Angelo discloses: 
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1 wherein requesting security data from a security device comprises requesting the 

2 security data from the security device over a direct connection between the security 

3 device and the microcontroller, and wherein receiving the security data from the security 

4 device, at the microcontroller, comprises receiving the security data from the security 

5 dewce over the direct connection to the microcontroller (Flyntz, fig. 2, elem. 31 , 32). 

6 The combination of Flyntz and Angelo discloses a direct connection between the 

7 security device and the microcontroller. 
8 

9 Regarding claim 55, the combination of Flyntz and Angelo discloses: 

1 0 wherein requesting security data from a security device comprises requesting 

1 1 biometric data from a biometric device; wherein receiving the security data from the 

1 2 security device, at the microcontroller, comprises receiving the biometric data from the 

13 biometric device, at the microcontroller {F\yr\\z, col. 2, lines 52-66; col. 15, lines 5-20, 

1 4 33-36, 53-55; col. 6, lines 36-46). 

1 5 wherein evaluating the security data comprises evaluating the biometric data; 

1 6 and wherein approving the authentication if the security data is evaluated as acceptable 

1 7 comprises approving the authentication if the biometric data is evaluated as acceptable 

18 (Flyntz, col. 2, lines 52-56; col. 15, lines 5-20, 33-36, 53-55; col. 6, lines 36-46; col. 10, 

19 lines 33-40). 
20 
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1 Regarding claims 56 - 65, they are the method steps and method implemented 

2 on computer readable medium claims corresponding to the method claims above, and 

3 are rejected, at least, for the same reasons. 
4 

5 

6 Response to Arguments 

7 

8 Applicant's arguments filed 10/12/06 have been fully considered but they are not 

9 persuasive. 
10 

1 1 Applicant argues primarily that: 

12 

13 (i) ... Flyntz does not describe or suggest receiving a request for an auttientication 

14 at a microcontroller included in a bridge, as set forth in independent claims 51, 56, and 

15 61. Flyntz also fails to describe or suggest that the request is received from a bus 

16 external to the bridge, as set forth in independent claims 51, 56, and 61. Angelo fails to 

1 7 remedy the fundamental deficiencies of Flyntz, the Examiner's primary reference. In 

1 8 particular, the microprocessor 102 described by Angelo is located in the CPU/memory 

19 subsystem 100, which is coupled to the PCI bus by the PCI-ISA bridge 130. The 

20 microprocessor 102 depicted in Figure 1 and described by Angelo is therefore not 

21 included in the PCI-ISA bridge 130. (Remarks, pg. 2, 3) 
22 
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In response, the examiner reaffirms that the cximbination teaches a 



2 microcontroller comprised within a bridge, and a request received from a bus external to 

3 the bridge (Flyntz, fig. 2:32; claims 8,9,16; Angelo, fig. 1:130; 5:1-30; 10:33-65; see also 

4 rejections above). Though the applicant has pointed out a microprocessor (fig. 1:102) 

5 that is part of the system of Angelo, the examiner points out that microprocessor 

6 (Angelo, fig. 1 :102) was never relied upon within the above rejections. Additionally, the 

7 microprocessor (1 02) was never said to have been inside of bridge (130). This 

8 microprocessor does not correspond to the microcontroller of the prior art for controlling 

9 the secure power up and access of resources to verified users - the microcontroller 
1 0 further comprised within a bridge. 

11 
12 

13 Conclusion 
14 

1 5 Claims 51 - 65 are rejected. 
16 

1 7 The prior art made of record and not relied upon is considered pertinent to 

18 applicant's disclosure: 



19 



20 



See Notice of References Cited. 



21 
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1 THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of 

2 time policy as set forth in 37 CFR 1 .136(a). 

3 A shortened statutory period for reply to this final action is set to expire THREE 

4 MONTHS from the mailing date of this action. In the event a first reply is filed within 

5 TWO MONTHS of the mailing date of this final action and the advisory action is not 

6 mailed until after the end of the THREE-MONTH shortened statutory period, then the 

7 shortened statutory period will expire on the date the advisory action is mailed, and any 

8 extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 

9 the advisory action. In no event, however, will the statutory period for reply expire later 
1 0 than SIX MONTHS from the mailing date of this final action. 

11 

12 Any inquiry concerning this communication or earlier communications from the 

1 3 examiner should be directed to Jeffery Williams whose telephone number is (571 ) 272- 

14 7965. The examiner can normally be reached on 8:30-5:00. 

1 5 If attempts to reach the examiner by telephone are unsuccessful, the examiner's 

16 supervisor, Emmanuel Moise can be reached on (571) 272-3865. The fax phone 

1 7 number for the organization where this application or proceeding is assigned is (703) 

18 872-9306. 
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1 Information regarding the status of an application may be obtained from the 

2 Patent Application Information Retrieval (PAIR) system. Status information for 

3 published applications may be obtained from either Private PAIR or Public PAIR. 

4 Status information for unpublished applications is available through Private PAIR only. 

5 For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 

6 you have questions on access to the Private PAIR system, contact the Electronic 

7 Business Center (EBC) at 866-217-9197 (toll-free). 
8 

9 

10 J. Williams 

11 AU2137 
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